Privacy Policy

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website and purchase our products.

Last Updated: July 2026

1. Introduction

Welcome to our website. We are an India-based fashion e-commerce platform offering women's clothing, shawls, scarves, ethnic wear, and accessories. This Privacy Policy describes how our company ("we", "our", or "us") collects, uses, stores, shares, and protects your personal information when you access or use our website, products, and services.

We are committed to protecting your privacy and handling your personal data in a transparent and lawful manner. This policy applies to all visitors, registered users, and customers of our website. By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy.

We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and align our practices with internationally recognised data protection principles, including those of the General Data Protection Regulation (GDPR) where applicable.

If you have any questions or concerns about this policy, please contact us using the details provided in Section 16 below.

2. Information We Collect

We collect information you provide directly to us and information that is automatically collected when you use our website. Below is a detailed breakdown of the categories of personal data we may collect.

2.1 Information You Provide to Us

When you interact with our website, you may provide us with the following categories of personal information:

Account & Profile Information

  • Full name
  • Email address
  • Phone number
  • Password (stored in encrypted form)

Address Information

  • Billing address
  • Shipping address
  • Pincode / ZIP code
  • City, State, Country

Order & Payment Information

  • Order history and details
  • Product preferences and size information
  • Payment method details (processed securely by third-party gateways — we do not store full card numbers)

Communications & Feedback

  • Messages submitted via our contact form
  • Product reviews and ratings
  • Wishlist items
  • Newsletter subscription preferences
  • Communications with our customer support team

2.2 Information Collected Automatically

When you browse our website, we automatically collect certain technical information using cookies and similar tracking technologies:

2.3 Information from Third Parties

We may receive information about you from third-party services we use, including:

3. How We Use Your Information

We use your personal information for the following purposes:

Purpose Categories of Data Used Legal Basis (DPDP Act / GDPR)
To process and fulfil your orders Name, address, phone, email, payment confirmation Performance of contract
To create and manage your account Name, email, phone, password Performance of contract / Consent
To communicate with you about your orders Name, email, phone, order details Performance of contract
To send marketing communications (with your consent) Name, email, purchase history, preferences Consent
To improve our website and product offerings Usage data, device/browser information, feedback Legitimate interest
To detect and prevent fraud IP address, device info, order patterns, payment data Legal obligation / Legitimate interest
To comply with legal and regulatory obligations All relevant personal data as required by law Legal obligation
To analyse website traffic and user behaviour Cookies, usage data, IP address, device info Consent (where required) / Legitimate interest

We will not process your personal information in a manner incompatible with the purposes listed above without first notifying you and, where required, obtaining your fresh consent.

4. Cookies Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and serve personalised content and advertisements.

4.1 What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or mobile) when you visit a website. They allow the website to recognise your device and remember your preferences, login status, and browsing behaviour over time.

4.2 Types of Cookies We Use

Cookie Type Purpose Duration
Essential / Strictly Necessary Required for the website to function properly. Includes session cookies, cart management, and security cookies. Session / Persistent
Functional / Preference Remember your preferences such as language, currency, and saved login details. Up to 12 months
Analytics / Performance Help us understand how visitors interact with our website by collecting anonymised data on pages visited, time spent, and error messages (e.g., Google Analytics). Up to 24 months
Advertising / Targeting Used to deliver relevant advertisements to you on our website and across third-party platforms (e.g., Google Ads, Meta Pixel). These cookies track your browsing habits and may share data with advertising partners. Up to 24 months
Social Media Enable sharing of content on social media platforms and allow us to measure the effectiveness of our social media campaigns. Varies

4.3 Your Cookie Choices

When you first visit our website, we display a cookie consent banner that allows you to accept or decline non-essential cookies. You can change your preferences at any time through the cookie settings available on our website.

You may also manage cookies directly through your browser settings. Most browsers allow you to block or delete cookies, but please note that disabling certain cookies may affect the functionality of our website and your user experience. For more information on how to manage cookies, visit www.aboutcookies.org.

5. Marketing Communications

With your explicit consent, we may send you marketing communications about our products, special offers, new arrivals, and promotional events. These communications may be delivered via email, SMS, or other electronic means.

5.1 Newsletter Subscription

If you subscribe to our newsletter, we will use your email address to send you periodic updates about our products and promotions. You can unsubscribe at any time by clicking the "unsubscribe" link at the bottom of each marketing email or by contacting us directly.

5.2 Opt-Out Rights

You have the right to withdraw your consent to marketing communications at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. Please note that even if you opt out of marketing communications, we may still send you non-promotional transactional messages related to your orders, account, or other business communications.

5.3 Third-Party Marketing Platforms

We may use third-party email marketing service providers to manage and send our communications. These providers are contractually obligated to protect your data and use it only for the purposes we specify. We do not sell or rent your personal information to third parties for their own marketing purposes.

6. Analytics & Tracking Technologies

We use various analytics and tracking technologies to understand how our website is used, measure the effectiveness of our advertising, and improve your shopping experience.

6.1 Google Analytics

We use Google Analytics to collect and analyse information about how visitors use our website. Google Analytics uses cookies and similar technologies to generate reports on website traffic and user behaviour. The information collected is transmitted to and stored by Google on servers in the United States and other countries. Google may use this data in accordance with its own Privacy Policy. To learn more about Google's data practices and how to opt out, visit Google's Privacy Policy and Google Analytics Opt-Out Browser Add-on.

6.2 Meta Pixel (Facebook Ads)

We use the Meta Pixel (formerly Facebook Pixel) on our website to measure the effectiveness of our advertising campaigns on Facebook and Instagram, build custom audiences for targeted advertising, and understand the actions users take on our website. The Meta Pixel collects information about your browsing activity on our website, which is linked to your Facebook/Meta account. For more information about how Meta processes your data, please visit Meta's Data Policy. You can adjust your ad preferences through your Facebook/Meta account settings.

6.3 Google Ads

We use Google Ads (including Google Ads Conversion Tracking and Google Remarketing Tag) to display relevant advertisements to you on Google's network and to measure the performance of our ad campaigns. Google uses cookies to serve ads based on your previous visits to our website. You can manage your Google Ads personalisation settings at Google Ad Settings.

6.4 WhatsApp Chat

We offer WhatsApp chat functionality for customer support and sales inquiries. If you initiate a WhatsApp chat with us, your phone number and the content of your messages will be processed through WhatsApp's platform in accordance with Meta's Privacy Policy. We use this information solely to respond to your inquiries and provide customer support.

6.5 Your Choices Regarding Tracking

In addition to cookie consent settings and browser controls, you may opt out of certain tracking through the following mechanisms:

7. Payment Security

We take the security of your payment information very seriously. All payment transactions on our website are processed securely through third-party payment gateway providers. We accept the following payment methods:

7.1 How We Protect Your Payment Data

For Cash on Delivery orders, payment is collected at the time of delivery by our shipping partners. No payment card details are collected through this method.

8. Third-Party Services

We use various third-party service providers to help us operate our website, process orders, and deliver our products. These third parties have access to your personal information only to perform specific tasks on our behalf and are contractually obligated to protect your data in accordance with applicable data protection laws.

Service Category Service Provider Data Shared Purpose
Payment Processing Payment gateway providers Payment details, order amount, transaction ID Process payments securely
Shipping & Logistics Domestic shipping partners Name, address, phone number, order details Deliver your orders
Web Analytics Google Analytics Usage data, cookies, IP address (anonymised) Analyse website traffic and user behaviour
Advertising Google Ads, Meta (Facebook) Ads Cookies, browsing behaviour, conversion data Deliver targeted advertisements
Messaging / Support WhatsApp (Meta) Phone number, message content Customer support and inquiries
Email Marketing Email marketing service providers Name, email address, subscription preferences Send newsletters and promotional emails
Hosting & Infrastructure Web hosting providers IP address, website usage data Host and operate the website

We encourage you to review the privacy policies of these third-party service providers to understand how they handle your personal information. We are not responsible for the privacy practices of these third parties.

9. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties for their own marketing purposes. We may share your personal information only in the following circumstances:

Important: We do not share your personal information with any third party for their own direct marketing purposes. Any sharing of data is limited to what is necessary to provide our services to you or as required by law.

10. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to provide our products and services, comply with legal obligations, resolve disputes, and enforce our agreements.

10.1 Retention Periods

10.2 Data Disposal

When personal information is no longer required for the purposes for which it was collected, we will securely delete, anonymise, or destroy it in a manner that prevents unauthorised access or reconstruction.

11. Your Rights

We respect your rights over your personal data. Under the Digital Personal Data Protection Act (DPDP Act) of India and, where applicable, the General Data Protection Regulation (GDPR), you have the following rights:

Right Description How to Exercise
Right to Access Request a copy of the personal information we hold about you. Submit a request via the Contact Information in Section 16.
Right to Correction Request correction of inaccurate or incomplete personal information. Update in your account settings or contact us.
Right to Erasure (Right to be Forgotten) Request deletion of your personal information, subject to certain legal exceptions. Submit a deletion request via the Contact Information in Section 16.
Right to Restrict Processing Request restriction of processing of your personal information in certain circumstances. Contact us with your specific request.
Right to Data Portability Request receipt of your personal information in a structured, commonly used, machine-readable format. Submit a request via the Contact Information in Section 16.
Right to Withdraw Consent Withdraw your consent to processing based on consent at any time. Update preferences in your account or contact us.
Right to Grievance Redressal File a complaint regarding our handling of your personal data. Contact our Grievance Officer (see Section 16).

11.1 How to Exercise Your Rights

To exercise any of the rights listed above, please contact us using the details provided in Section 16. We will respond to your request within a reasonable timeframe, and in any event within the time period prescribed under applicable law (currently 30 days under the DPDP Act from the date of receipt of a verifiable request). We may need to verify your identity before processing your request to protect your privacy and security.

11.2 Grievance Redressal Mechanism

If you have any grievances regarding the handling of your personal information, you may contact our Grievance Officer (details in Section 16). We will acknowledge receipt of your grievance within 24 hours and resolve it within 30 days from the date of receipt. If you are not satisfied with our response, you have the right to file a complaint with the Data Protection Board of India established under the DPDP Act.

12. Children's Privacy

Our website and services are intended for individuals who are at least 18 years of age. We do not knowingly collect, use, or disclose personal information from children under the age of 18 without verifiable parental consent.

In compliance with the Digital Personal Data Protection Act (DPDP Act), processing of personal data of children (individuals under 18 years of age) requires verifiable parental consent. We do not engage in any behavioural monitoring or targeted advertising directed at children.

If we become aware that we have inadvertently collected personal information from a child under 18 without appropriate parental consent, we will take steps to delete such information promptly. If you believe that a child under 18 has provided us with personal information, please contact us immediately using the details in Section 16.

13. International Data Transfers

As our primary operations are based in India, your personal information is primarily stored and processed on servers located in India. However, some of our third-party service providers (such as Google, Meta, and certain analytics and marketing platforms) may process your data on servers located outside India, including in the United States and other jurisdictions.

When we transfer your personal information to countries outside India, we ensure that appropriate safeguards are in place to protect your data, including:

For transfers subject to GDPR standards, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or other appropriate transfer mechanisms as permitted under applicable law.

14. Security Measures

We implement appropriate technical, administrative, and physical security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. Our security measures include:

Technical Security Measures

  • SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard SSL/TLS protocols.
  • Secure Data Storage: Passwords are stored using strong, salted hashing algorithms. Personal data is stored on secured servers with restricted access.
  • Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing.
  • Firewall & Intrusion Detection: Our systems are protected by firewalls and intrusion detection/prevention systems.
  • Access Controls: Strict role-based access controls ensure that only authorised personnel can access personal data.

Administrative & Organisational Measures

  • Data Protection Training: Our employees receive regular training on data protection and privacy best practices.
  • Data Processing Agreements: We maintain written agreements with all third-party service processors that require them to adhere to data protection standards.
  • Incident Response Plan: We have a documented data breach response and notification procedure in place.
  • Privacy by Design: We incorporate data protection considerations into the design and development of our website and processes.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to taking all reasonable steps to protect your data. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will notify you by:

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website after any changes to this policy constitutes your acceptance of the updated policy. If you do not agree with any changes, you should discontinue use of our website and, where applicable, request deletion of your account and personal data.

16. Contact Information

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or our data practices, please contact us using the details below.

Grievance Officer / Data Protection Officer

In compliance with Section 11 of the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address any concerns or complaints regarding the processing of your personal information.

Email: privacy@ourwebsite.com
Phone: +91-XXXXXXXXXX
Office Hours: Monday to Saturday, 10:00 AM – 6:00 PM IST

Registered Address:
Our Company Name
Address Line 1
City, State – Pincode
India

Response Time: We acknowledge receipt of privacy-related inquiries within 24 hours and strive to resolve all complaints and grievances within 30 days from the date of receipt, as required under the DPDP Act.

Data Protection Board of India: If you are not satisfied with our response to your grievance, you have the right to file a complaint with the Data Protection Board of India as established under the Digital Personal Data Protection Act, 2023.

Back to Top